FACTORING WITH CONTINUED FRACTIONS, THE PELL EQUATION, AND WEIGHTED MEDIANTS
|
|
- Kimberly Gaines
- 8 years ago
- Views:
Transcription
1 Fizikos ir matematikos fakulteto Seminaro darbai, iauliu universitetas, 6, 2003, FACTORING WITH CONTINUED FRACTIONS, THE PELL EQUATION, AND WEIGHTED MEDIANTS Jörn STEUDING, Rasa LEšEVIƒIEN E Johann Wolfgang Goethe-Universität Frankfurt, Robert-Mayer-Str. 10, Frankfurt, Germany; steuding@math.uni-frankfurt.de iauliai University, Vytauto 84, 5400 iauliai, Lithuania; rasa.slezeviciene@fm.su.lt Abstract. We investigate the Continued fraction method CFRAC) for factoring large integers N. This method is based on the arithmetic properties of the convergents to N. Using the theory of the Pell equation, we construct an innite family of explicit examples of composite numbers for which CFRAC fails. We present a new variant of CFRAC, based on weighted mediants of the convergents to N, to overcome this problem. Finally, we give an examples of a 45-digit number for which our strategy succeeds. Key words and phrases: continued fraction, factoring large integers, Pell equation, weighted mediants. Mathematics Subject Classication: 11A55, 11D Introduction It is easy to multiply integers but, conversely, it is rather dicult to nd the prime factorization of a given large integer. This is the basis of many cryptosystems in practice. It is conjectured that factoring is an NP-problem, i.e., roughly speaking, there does not exist a fast factoring algorithm. One of the rst modern factorization methods is the Continued fraction method CFRAC due to Lehmer and Powers [5]. The rst implemention was realized by Brillhart and Morrison [2] with which they factored at 13 September 1970 the 38-digit seventh Fermat number F 7 := = ;
2 J. Steuding, R. leºevi iene 121 for the current knowledge on Fermat numbers we refer to net/fermat.html#prime. Soon after CFRAC became the main factoring algorithm in practice; actually it was the rst algorithm of expected subexponential running time. Until the 1980s it was the method of choice for factoring large integers but it has a limit at around 50 digits. CFRAC relies on an old idea of Fermat and Legendre, respectively. Suppose that we are interested in the prime factorization of a large integer N. If there are integers X, Y for which X 2 Y 2 mod N and X ±Y mod N, then the greatest common divisor gcdn, X + Y) is a non-trivial factor of N. This follows immediately from the identity X 2 Y 2 = X Y)X + Y). To look randomly for pairs of squares which satisfy these conditions is hopeless. In 1929 Kraitchik proposed to search randomly for suciently many squares which lie in the same residue class mod N, such that certain combinations among them lead to non-trivial divisors of N. More precisely, having suciently many congruences x 2 j 1) ε 0j l ε 1j 1 lε 2j 2... l ε mj m mod N, where the l k are small prime numbers and the ε kj are the related exponents, by Gaussian elimination modulo 2 one may hope to nd a relation of the form δ j ε 0j,..., ε mj ) 0,..., 0) mod 2, 1) j n where δ j {0, 1}. Then, setting X = j n x δ j j and Y = 1) ν 0 l ν 1 1 lν l νm m, 2) where j n δ jε 0j,..., ε mj ) = 2ν 0, ν 1,..., ν m ), we get X 2 Y 2 mod N. This splits N if X ±Y mod N. The set of prime numbers l which are chosen to nd the congruences in addition with 1 is called factor basis. Kraitchik proposed to generate the squares x 2 j by the nearest integers to N. The much more powerful continued fraction algorithm works with the numerators of the convergents to N. These convergents are the best rational approximations which make them to important objects in the theory of diophantine approximations and equations. However, they are also very useful for generating small squares modulo N as we shall see below. There are composite integers that CFRAC cannot factorize. It is our aim to give
3 122 Factoring with continued fractions an innite family of examples for such failures and to present a renement to overcome this problem. Before we present CFRAC we recall some basic facts from the theory of continued fractions. 2. Continued fractions The powerful tool of continued fractions was rst systematically studied by the dutch astronomer Huygens in the 17th century, motivated by technical problems while constructing a mechanical model of our solar system. All results given in this paragraph can be found in the classic [6]. For a 0 Z and a j N with 1 j < N and a N 1 the expression a 0 + a a a N + 1 a N denes a nite simple continued fraction. The a j are called partial denominators. For abbreviation we write [a 0, a 1, a 2,..., a N ] for the continued fraction above. First, we shall consider [a 0,..., a N ] as a function in the variables a 0,... a N. For j N we call [a 0, a 1,..., a j ] the j-th convergent to [a 0, a 1,..., a N ] and dene p 1 = 1, p 0 = a 0 and p j = a j p j 1 + p j 2, q 1 = 0, q 0 = 1 and = a j ) The computation of the convergents is easily ruled by means of the identities and p j = [a 0, a 1,..., a j ] 4) p j 1 p j 1 = 1) j. 5) The continuous fraction expansion is not unique since [a 0, a 1, a 2,..., a N ] = [a 0, a 1, a 2,..., a N 1, 1]. By the Euclidean algorithm it is rather easy to expand a rational number into a nite continued fraction [a 0, a 1, a 2,..., a N ], which is unique if 1 < a N N.
4 J. Steuding, R. leºevi iene 123 More generally we can attach to any given real number α =: α 0 a continued fraction by the iteration α j = α j + 1 α j+1 for j = 0, 1,.... We put a j = α j, where α j denotes the greatest integer α j. Obviously, if α is rational, the iteration stops after nitely many steps, and otherwise, if α is irrational, the iteration does not stop and we get by this procedure formally) α = [a 0, a 1, a 2,...]; the right hand side is an innite continued fraction. The rst thing we have to ask whether this innite process is convergent? By 4) and 5), α p j = α j+1p j + p j 1 α j p j = 1) j α j ). 6) Since the are strictly increasing for j 2, we observe that It follows that if α is irrational, then p 0 q 0 < p 2 q 2 <... < α <... < p 3 q 3 < p 1 q 1. α p j < 1 +1 ; 7) this is Dirichlet's celebrated approximation theorem. Furthermore, the innite continued fraction exists and represents α: p j α = lim = [a 0, a 1, a 2,...]. j It is easily shown that the continued fraction expansion of any irrational number is uniquely determined. In view of 6) it becomes visible what an important role continued fractions play in the theory of Diophantine approximations. A continued fraction [a 0, a 1,...] is said to be periodic if there exists an integer l with a j+l = a j for all suciently large n. We write for short [a 0, a 1,..., a n, a j+1,..., a j+l ] = [a 0, a 1,..., a n, a j+1,..., a j+l, a j+1,..., a j+l,...]. Here and in the sequel l = lα) denotes the minimal length of a period in the continued fraction expansion of α. Lagrange's theorem gives a classication
5 124 Factoring with continued fractions of quadratic irrationals, i.e., roots of irreducible quadratic polynomials with integral coecients: an irrational number α is quadratic irrational if and only if its continued fraction expansion is eventually periodic. In particular, the partial denominators of quadratic irrationals are bounded. It can be shown that if N is not a perfect square, then [ N = N, a 1, a 2,..., a 2, a 1, 2 ] N, and all appearing a i satisfy a i < 2 N. For instance, if n is a positive integer, then n = [n, n, 2n]. 8) 3. The Continued fraction factoring method Lehmer and Powers [5] presented two slightly dierent factorization methods. One of them, the A method, is dealing with the numerators p j of the convergents of the continued fraction N whereas the other one, the P method, is working with the denominators Q j in 10) below. They proved that the only instance of the success of one method and the failure of the other is that in which the A method succeeds, the P method fails, and a factor of N appears among the P s and Q s. We shall only consider the A method. In what follows m mod N denotes the smallest residue of m modulo N in absolute value. Then CFRAC has the following form: For j = 0, 1, 2,... successively: 1. Compute the jth convergent p j of the continued fraction expansion to N. 2. Compute p 2 j mod N. After doing this for several j, look at the numbers ±p 2 j mod N which factor into a product of small primes. Dene your factor base B to consist of 1, the primes which either occur in more than one of the p 2 j mod N or which occur to an even power in just one p 2 j mod N. 3. List all of the numbers p 2 j mod N which can be expressed as a product of numbers in the factor base B. If possible, nd a subset of numbers l's of B for which the exponents ε according to the prime numbers in B sum to zero modulo two as in 1), and dene X, Y by 2). If X ±Y mod N, then gcdx + Y, N) is a non-trivial factor of N. If this is impossible, then compute more p j and p 2 j mod N, enlarging the factor base B if necessary.
6 J. Steuding, R. leºevi iene 125 Of course, to speed up the algorithm one can reduce mod N whenever it is possible. Once the number of completely factored integers exceeds the size of the factor base, we can nd a product of them which is a perfect square. With a little luck this yields a non-trivial factor of our given number by the observations from the introduction). The crucial property of the values p j is, as we shall show below, that their squares have small residues modulo N. Otherwise, CFRAC would hinge on the problem of nding an appropriate factor base B. Theorem 1. Let α > 1 be irrational. Then the convergents p j to α satisfy the inequality qj 2 α 2 p 2 j < 2α. In particular, if α = N, where N N is not a perfect square, then the residue p 2 j mod N is of modulus less than 2 N. We sketch the proof since it is essential for the running time of CFRAC. Proof. In view of 7) Thus, qj 2 α 2 p 2 j = qj 2 α p j α + p j < q2 j +1 q 2 j α 2 p 2 j 2α < 2α αq 2 j+1 ) 2α + 1 ). +1 < 2α 1 + q ) j + 1, +1 which is less or equal to zero, and proves the rst assertion of the theorem. The claim on p 2 j mod N is an immediate consequence. Therefore, the sequence of the numerators of the convergents of N provides a sequence of p j 's whose squares have small residues mod N. If the squares are generated by the nearest integers to N as proposed by Kraitchik, one observes that x 2 N grows fairly quickly. More precisely, it is approximately equal to 2 N x N, which reduces the probability that x 2 N splits completely using only primes from the factor basis. The so-called Quadratic sieve overcomes this diculty by a sifting process as in the Sieve of Eratosthenes). It is a well-known fact that CFRAC does not work for prime powers N = p k with k 2. This causes no diculties. It is quite easy to check whether a given N is a prime power or not. However, there are other examples for which CFRAC does not work. For concrete examples we study a certain Diophantine equation.
7 126 Factoring with continued fractions 4. The Pell equation The Pell equation is given by X 2 NY 2 = 1, 9) where N is a positive integer. It should be noted that Pell was an English mathematician who lived in the seventeenth century but he had nothing to do with this equation. We are interested in integral solutions. Obviously, x = 1 and y = 0 is always a solution. By symmetry it suces to look for solutions in positive integers. If N is a perfect square, we can factor the lefthand side, and it turns out that 9) has no further solutions in integers. In the sequel we assume that N is not a perfect square. Euler observed that if x, y N is a solution of 9), then the left-hand side of 9) splits over Q N) which leads to x N y = 1 ry 2 N + x y ). In view of this excellent rational approximation to N it turns out that x y is a convergent to N. The complete solution of the Pell equation is due to Legendre and Lagrange. If we write N = [ N, a1,..., a j, α j+1 ], then there exist integers P j and Q j 1 such that α j = P j + N, 10) Q j where Q j N Pj 2 ). Taking into account the periodicity of the continued fraction expansion of N, it follows that the sequence of the P j, Q j is periodic as well. It can be shown that p 2 j 1 Nqj 1 2 = 1) j Q j. 11) Furthermore, if and only if j is a multiple of the minimal period l, then Q j = 1, and the convergent p j 1 1 corresponds to a solution of the Pell equation. Thus, all solutions of 9) are given by { pkl 1, q x k, y k ) = kl 1 ) if l is even, p 2kl 1, q 2kl 1 ) if l is odd. Note that all solutions can be found via x k + y k N = ±x1 + y 1 N) ±k, where k = 0, 1, 2,....
8 5. Explicit examples for failures J. Steuding, R. leºevi iene 127 The chances for factoring N increase when we have many squares p 2 j mod N. But with regard to 11) the sequence of the denominators of the convergents to the continued fraction of N is periodic of length 2l N). Kraitchik [4] proved that the minimal period length satises l N) 0.72 N log N, where N is any integer greater than 7; it is conjectured that log N can be replaced by log log N. However, if the period of the continued fraction expansion of N is too short, then the algorithm can only produce a small factor basis, which reduces the chances for factoring N. If for example N = n 2 + 2, then by 11) 1) j Q j = p 2 j 1 n 2 + 2)q 2 j 1 p 2 j 1 mod n 2 + 2). Alternatively, with regard to 3) and 8) we can compute directly { p j mod n 2 ±n if j is even, + 2) = ±1 if j is odd. Anyway, it follows that p 2 j mod n2 + 2) = 1 or = 2. This gives with the notation used in the CFRAC algorithm X +Y or Y mod N. CFRAC does not work for numbers N = n One strategy to overcome this problem is to replace N by some kn, where k is some suitably chosen integer, hoping that the continued fraction expansion of kn has better properties, see [1] for further details. In the following section we shall present another renement of CFRAC. 6. Weighted mediants For two distinct positive reduced fractions a b, c d we dene their mediant with positive integral weights λ, µ by aλ + cµ bλ + dµ ; for λ = µ this is the so-called mediant of a b, c d which is of special interest in the theory of Farey fractions. It is easily seen that the weighted mediant lies in between a b and d. c One can show that each rational number in the
9 128 Factoring with continued fractions interval with limits a b, c d is a mediant of the upper and lower bound for a certain weight λ, µ. In view of Dirichlet's approximation theorem 7) it makes sense to measure the order of approximation of a reduced fraction a b to a given irrational α by their distance in terms of the denominator b. If we have two excellent rational approximations a b and c d to an irrational α, then the weighted mediant of a b and c d is a good approximation if the weights are suciently small, as we will show now. Firstly, aλ + cµ α α bλ + dµ a + a aλ + cµ b α b bλ + dµ a + b µ bc ad bbλ + dµ). 12) Now let a b, c d be two convergents to an irrational α > 1. By 12) we get, similarly as in the proof of Theorem 1, bλ + dµ) 2 α 2 aλ + cµ) 2 = bλ + dµ) 2 aλ + cµ α bλ + dµ aλ + cµ α + bλ + dµ bλ + dµ) 2 aλ + cµ α bλ + dµ ) 2α + aλ + cµ α bλ + dµ α bλ + dµ) 2 a ) µ bc ad + b bbλ + dµ) 2α + α a ) µ bc ad +. b bbλ + dµ) In view of 7) bλ + dµ) 2 α 2 aλ + cµ) 2 < λ 2 db d2 + 2λµ + µ2 + µ bc ad b2 2α + 1 µ bc ad + b2 bbλ + dµ) ). λ + µ d )) b Without loss of generality we may assume that d < b. By 5) we have bc dy = 1 for two consecutive convergents a b, c d. In this case we nd bλ + dµ) 2 α 2 aλ + cµ) 2 < λ 2 + 2λµ + µ 2 + µλ + µ)) < λ 2 + 3λµ + 2µ 2 )2α + 2). Thus we have proved the following statement. 2α + 1 ) b 2 + µ bdλ + µ)
10 J. Steuding, R. leºevi iene 129 Theorem 2. Let α > 1 be irrational. If a b, c d are two consecutive convergents to α with d < b, then bλ + dµ) 2 α 2 aλ + cµ) 2 < 2λ 2 + 3λµ + 2µ 2 )α + 1) for any positive coprime integers λ, µ. In particular, if α = N, where N N is not a perfect square, then aλ + cµ) 2 mod N < 2λ 2 + 3λµ + 2µ 2 ) N + 1). Hence, the squares aλ+cµ) 2 mod N of numerators of weighted mediants to consecutive convergents with weights 1 λ, µ C, where C is any constant, are bounded by N as the ordinary convergents to N. Consequently, we can also use weighted mediants in the continued fraction factoring method; the eort for factoring the squares into an appropriate factor base is approximately the same as if one works with convergents, only. 7. A renement and an example Our idea is rather simple. If the period of the continued fraction expansion of N is too short, i.e., if we cannot factor N by the congruences coming from the squares of the numerators of the convergents to N, then one can work with weighted mediants of the convergents additionally. Thus we add to the CFRAC algorithm of the Section 3 as fourth step: if the full period did not lead to a factorization of N, compute for 1 j l N) and coprime non-negative integers λ, µ the numbers p j λ, µ) := λp j 1 + µp j mod N and return to step 2 by replacing p j mod N with p j λ, µ). We shall give an example. In the case of numbers N = n these weighted mediants are λn + µn 2 + 1) and λn2 + 1) + µ2n 3 + 3n) λ + µn λn + µ2n ) We need only the squares of the numerators modulo N which are λn 2 2λµn + µ 2 and λ 2 + 2λµn + µ 2 n 2. Varying the weights λ, µ = 0, 1,... gives a plenty of good candidates for building up an appropriate factor base note that the case λ = 1 and µ = 0 yields the old CFRAC algorithm). This algorithm was implemented on a standard personal computer. For instance, we factored N = = =
11 130 Factoring with continued fractions It seems to be a good strategy to use also weighted mediants of weigthed mediants in fact, these are mediants to convergents with larger weights). If there are small prime divisors, this algorithm is rather fast and splits quite large integers. For instance, we found for the 45-digit number N = References = = [1] H. Riesel, Prime numbers and Computer methods for factorization, Basel, Birkhäuser 1985). [2] J. Brillhart, M. A. Morrison, A method of factoring and the factorization of F 7, Math. Comp. 29, ). [3] N. Koblitz, A course in Number theory and Cryptography, Berlin, Springer, 2nd ed. 1994). [4] M. Kraitchik, Recherches sur la Théorie des Nombres, tome II, Paris, Gauthier-Villars, ). [5] D. H. Lehmer, R. E. Powers, On factoring large numbers, Bull. Amer. Math. Soc. 37, ). [6] O. Perron, Die Lehre von den Kettenbrüchen. I, Leipzig, Teubner, 3rd ed. 1954). Faktorizavimas naudojant grandinines trupmenas, Pelio lygti ir mediantes su svoriu J. Steuding, R. leºevi iene Darbe nagrinejamas grandininiu trupmenu metodas CFRAC) dideliu sveikuju skai iu N faktorizacijai. Jis remiasi N reduktu aritmetinemis savybemis. Naudojant Pelio lyg iu teorij, pateikiama sudetiniu skai iu pavyzdºiu, kuriems CFRAC metodas yra neveiksmingas tokiu skai iu yra be galo daug). Straipsnyje pristatomas naujas CFRAC variantas ²ios problemos sprendimui. Jis remiasi N reduktu mediantemis su svoriu. Be to, yra pateikiamas 45 skaitmenu skai ius, kuris faktorizuotas naudojant straipsnyje apra²yt strategij.
12 J. Steuding, R. leºevi iene 131 Rankra²tis gautas
Notes on Factoring. MA 206 Kurt Bryan
The General Approach Notes on Factoring MA 26 Kurt Bryan Suppose I hand you n, a 2 digit integer and tell you that n is composite, with smallest prime factor around 5 digits. Finding a nontrivial factor
More informationCONTINUED FRACTIONS AND FACTORING. Niels Lauritzen
CONTINUED FRACTIONS AND FACTORING Niels Lauritzen ii NIELS LAURITZEN DEPARTMENT OF MATHEMATICAL SCIENCES UNIVERSITY OF AARHUS, DENMARK EMAIL: niels@imf.au.dk URL: http://home.imf.au.dk/niels/ Contents
More informationU.C. Berkeley CS276: Cryptography Handout 0.1 Luca Trevisan January, 2009. Notes on Algebra
U.C. Berkeley CS276: Cryptography Handout 0.1 Luca Trevisan January, 2009 Notes on Algebra These notes contain as little theory as possible, and most results are stated without proof. Any introductory
More informationContinued Fractions. Darren C. Collins
Continued Fractions Darren C Collins Abstract In this paper, we discuss continued fractions First, we discuss the definition and notation Second, we discuss the development of the subject throughout history
More informationFactoring Algorithms
Factoring Algorithms The p 1 Method and Quadratic Sieve November 17, 2008 () Factoring Algorithms November 17, 2008 1 / 12 Fermat s factoring method Fermat made the observation that if n has two factors
More informationContinued Fractions and the Euclidean Algorithm
Continued Fractions and the Euclidean Algorithm Lecture notes prepared for MATH 326, Spring 997 Department of Mathematics and Statistics University at Albany William F Hammond Table of Contents Introduction
More informationCONTINUED FRACTIONS AND PELL S EQUATION. Contents 1. Continued Fractions 1 2. Solution to Pell s Equation 9 References 12
CONTINUED FRACTIONS AND PELL S EQUATION SEUNG HYUN YANG Abstract. In this REU paper, I will use some important characteristics of continued fractions to give the complete set of solutions to Pell s equation.
More informationAn Overview of Integer Factoring Algorithms. The Problem
An Overview of Integer Factoring Algorithms Manindra Agrawal IITK / NUS The Problem Given an integer n, find all its prime divisors as efficiently as possible. 1 A Difficult Problem No efficient algorithm
More informationInteger Factorization using the Quadratic Sieve
Integer Factorization using the Quadratic Sieve Chad Seibert* Division of Science and Mathematics University of Minnesota, Morris Morris, MN 56567 seib0060@morris.umn.edu March 16, 2011 Abstract We give
More informationHomework until Test #2
MATH31: Number Theory Homework until Test # Philipp BRAUN Section 3.1 page 43, 1. It has been conjectured that there are infinitely many primes of the form n. Exhibit five such primes. Solution. Five such
More informationPrimality - Factorization
Primality - Factorization Christophe Ritzenthaler November 9, 2009 1 Prime and factorization Definition 1.1. An integer p > 1 is called a prime number (nombre premier) if it has only 1 and p as divisors.
More informationApplications of Fermat s Little Theorem and Congruences
Applications of Fermat s Little Theorem and Congruences Definition: Let m be a positive integer. Then integers a and b are congruent modulo m, denoted by a b mod m, if m (a b). Example: 3 1 mod 2, 6 4
More informationTHE NUMBER OF REPRESENTATIONS OF n OF THE FORM n = x 2 2 y, x > 0, y 0
THE NUMBER OF REPRESENTATIONS OF n OF THE FORM n = x 2 2 y, x > 0, y 0 RICHARD J. MATHAR Abstract. We count solutions to the Ramanujan-Nagell equation 2 y +n = x 2 for fixed positive n. The computational
More informationInternational Journal of Information Technology, Modeling and Computing (IJITMC) Vol.1, No.3,August 2013
FACTORING CRYPTOSYSTEM MODULI WHEN THE CO-FACTORS DIFFERENCE IS BOUNDED Omar Akchiche 1 and Omar Khadir 2 1,2 Laboratory of Mathematics, Cryptography and Mechanics, Fstm, University of Hassan II Mohammedia-Casablanca,
More informationOn the largest prime factor of x 2 1
On the largest prime factor of x 2 1 Florian Luca and Filip Najman Abstract In this paper, we find all integers x such that x 2 1 has only prime factors smaller than 100. This gives some interesting numerical
More informationContents. 6 Continued Fractions and Diophantine Equations. 6.1 Linear Diophantine Equations
Number Theory (part 6): Continued Fractions and Diophantine Equations (by Evan Dummit, 04, v 00) Contents 6 Continued Fractions and Diophantine Equations 6 Linear Diophantine Equations 6 The Frobenius
More informationCHAPTER SIX IRREDUCIBILITY AND FACTORIZATION 1. BASIC DIVISIBILITY THEORY
January 10, 2010 CHAPTER SIX IRREDUCIBILITY AND FACTORIZATION 1. BASIC DIVISIBILITY THEORY The set of polynomials over a field F is a ring, whose structure shares with the ring of integers many characteristics.
More informationSome Polynomial Theorems. John Kennedy Mathematics Department Santa Monica College 1900 Pico Blvd. Santa Monica, CA 90405 rkennedy@ix.netcom.
Some Polynomial Theorems by John Kennedy Mathematics Department Santa Monica College 1900 Pico Blvd. Santa Monica, CA 90405 rkennedy@ix.netcom.com This paper contains a collection of 31 theorems, lemmas,
More informationStanford Math Circle: Sunday, May 9, 2010 Square-Triangular Numbers, Pell s Equation, and Continued Fractions
Stanford Math Circle: Sunday, May 9, 00 Square-Triangular Numbers, Pell s Equation, and Continued Fractions Recall that triangular numbers are numbers of the form T m = numbers that can be arranged in
More informationPRIME FACTORS OF CONSECUTIVE INTEGERS
PRIME FACTORS OF CONSECUTIVE INTEGERS MARK BAUER AND MICHAEL A. BENNETT Abstract. This note contains a new algorithm for computing a function f(k) introduced by Erdős to measure the minimal gap size in
More informationLecture 13: Factoring Integers
CS 880: Quantum Information Processing 0/4/0 Lecture 3: Factoring Integers Instructor: Dieter van Melkebeek Scribe: Mark Wellons In this lecture, we review order finding and use this to develop a method
More informationLecture 13 - Basic Number Theory.
Lecture 13 - Basic Number Theory. Boaz Barak March 22, 2010 Divisibility and primes Unless mentioned otherwise throughout this lecture all numbers are non-negative integers. We say that A divides B, denoted
More informationk, then n = p2α 1 1 pα k
Powers of Integers An integer n is a perfect square if n = m for some integer m. Taking into account the prime factorization, if m = p α 1 1 pα k k, then n = pα 1 1 p α k k. That is, n is a perfect square
More informationFACTORING. n = 2 25 + 1. fall in the arithmetic sequence
FACTORING The claim that factorization is harder than primality testing (or primality certification) is not currently substantiated rigorously. As some sort of backward evidence that factoring is hard,
More informationFACTORING POLYNOMIALS IN THE RING OF FORMAL POWER SERIES OVER Z
FACTORING POLYNOMIALS IN THE RING OF FORMAL POWER SERIES OVER Z DANIEL BIRMAJER, JUAN B GIL, AND MICHAEL WEINER Abstract We consider polynomials with integer coefficients and discuss their factorization
More informationCS 103X: Discrete Structures Homework Assignment 3 Solutions
CS 103X: Discrete Structures Homework Assignment 3 s Exercise 1 (20 points). On well-ordering and induction: (a) Prove the induction principle from the well-ordering principle. (b) Prove the well-ordering
More informationMath Review. for the Quantitative Reasoning Measure of the GRE revised General Test
Math Review for the Quantitative Reasoning Measure of the GRE revised General Test www.ets.org Overview This Math Review will familiarize you with the mathematical skills and concepts that are important
More information8 Primes and Modular Arithmetic
8 Primes and Modular Arithmetic 8.1 Primes and Factors Over two millennia ago already, people all over the world were considering the properties of numbers. One of the simplest concepts is prime numbers.
More informationDetermining the Optimal Combination of Trial Division and Fermat s Factorization Method
Determining the Optimal Combination of Trial Division and Fermat s Factorization Method Joseph C. Woodson Home School P. O. Box 55005 Tulsa, OK 74155 Abstract The process of finding the prime factorization
More informationBreaking The Code. Ryan Lowe. Ryan Lowe is currently a Ball State senior with a double major in Computer Science and Mathematics and
Breaking The Code Ryan Lowe Ryan Lowe is currently a Ball State senior with a double major in Computer Science and Mathematics and a minor in Applied Physics. As a sophomore, he took an independent study
More informationAlgebraic and Transcendental Numbers
Pondicherry University July 2000 Algebraic and Transcendental Numbers Stéphane Fischler This text is meant to be an introduction to algebraic and transcendental numbers. For a detailed (though elementary)
More informationOn Generalized Fermat Numbers 3 2n +1
Applied Mathematics & Information Sciences 4(3) (010), 307 313 An International Journal c 010 Dixie W Publishing Corporation, U. S. A. On Generalized Fermat Numbers 3 n +1 Amin Witno Department of Basic
More informationEvery Positive Integer is the Sum of Four Squares! (and other exciting problems)
Every Positive Integer is the Sum of Four Squares! (and other exciting problems) Sophex University of Texas at Austin October 18th, 00 Matilde N. Lalín 1. Lagrange s Theorem Theorem 1 Every positive integer
More informationThe van Hoeij Algorithm for Factoring Polynomials
The van Hoeij Algorithm for Factoring Polynomials Jürgen Klüners Abstract In this survey we report about a new algorithm for factoring polynomials due to Mark van Hoeij. The main idea is that the combinatorial
More informationSettling a Question about Pythagorean Triples
Settling a Question about Pythagorean Triples TOM VERHOEFF Department of Mathematics and Computing Science Eindhoven University of Technology P.O. Box 513, 5600 MB Eindhoven, The Netherlands E-Mail address:
More information2 Primality and Compositeness Tests
Int. J. Contemp. Math. Sciences, Vol. 3, 2008, no. 33, 1635-1642 On Factoring R. A. Mollin Department of Mathematics and Statistics University of Calgary, Calgary, Alberta, Canada, T2N 1N4 http://www.math.ucalgary.ca/
More informationPrime Numbers and Irreducible Polynomials
Prime Numbers and Irreducible Polynomials M. Ram Murty The similarity between prime numbers and irreducible polynomials has been a dominant theme in the development of number theory and algebraic geometry.
More informationRecent Breakthrough in Primality Testing
Nonlinear Analysis: Modelling and Control, 2004, Vol. 9, No. 2, 171 184 Recent Breakthrough in Primality Testing R. Šleževičienė, J. Steuding, S. Turskienė Department of Computer Science, Faculty of Physics
More information7. Some irreducible polynomials
7. Some irreducible polynomials 7.1 Irreducibles over a finite field 7.2 Worked examples Linear factors x α of a polynomial P (x) with coefficients in a field k correspond precisely to roots α k [1] of
More informationZeros of a Polynomial Function
Zeros of a Polynomial Function An important consequence of the Factor Theorem is that finding the zeros of a polynomial is really the same thing as factoring it into linear factors. In this section we
More informationMATH 537 (Number Theory) FALL 2016 TENTATIVE SYLLABUS
MATH 537 (Number Theory) FALL 2016 TENTATIVE SYLLABUS Class Meetings: MW 2:00-3:15 pm in Physics 144, September 7 to December 14 [Thanksgiving break November 23 27; final exam December 21] Instructor:
More informationFactoring Algorithms
Institutionen för Informationsteknologi Lunds Tekniska Högskola Department of Information Technology Lund University Cryptology - Project 1 Factoring Algorithms The purpose of this project is to understand
More informationRevised Version of Chapter 23. We learned long ago how to solve linear congruences. ax c (mod m)
Chapter 23 Squares Modulo p Revised Version of Chapter 23 We learned long ago how to solve linear congruences ax c (mod m) (see Chapter 8). It s now time to take the plunge and move on to quadratic equations.
More informationThe last three chapters introduced three major proof techniques: direct,
CHAPTER 7 Proving Non-Conditional Statements The last three chapters introduced three major proof techniques: direct, contrapositive and contradiction. These three techniques are used to prove statements
More informationMATH 168: FINAL PROJECT Troels Eriksen. 1 Introduction
MATH 168: FINAL PROJECT Troels Eriksen 1 Introduction In the later years cryptosystems using elliptic curves have shown up and are claimed to be just as secure as a system like RSA with much smaller key
More informationON FIBONACCI NUMBERS WITH FEW PRIME DIVISORS
ON FIBONACCI NUMBERS WITH FEW PRIME DIVISORS YANN BUGEAUD, FLORIAN LUCA, MAURICE MIGNOTTE, SAMIR SIKSEK Abstract If n is a positive integer, write F n for the nth Fibonacci number, and ω(n) for the number
More informationTEXAS A&M UNIVERSITY. Prime Factorization. A History and Discussion. Jason R. Prince. April 4, 2011
TEXAS A&M UNIVERSITY Prime Factorization A History and Discussion Jason R. Prince April 4, 2011 Introduction In this paper we will discuss prime factorization, in particular we will look at some of the
More informationAn example of a computable
An example of a computable absolutely normal number Verónica Becher Santiago Figueira Abstract The first example of an absolutely normal number was given by Sierpinski in 96, twenty years before the concept
More informationFactorization Methods: Very Quick Overview
Factorization Methods: Very Quick Overview Yuval Filmus October 17, 2012 1 Introduction In this lecture we introduce modern factorization methods. We will assume several facts from analytic number theory.
More informationArithmetic algorithms for cryptology 5 October 2015, Paris. Sieves. Razvan Barbulescu CNRS and IMJ-PRG. R. Barbulescu Sieves 0 / 28
Arithmetic algorithms for cryptology 5 October 2015, Paris Sieves Razvan Barbulescu CNRS and IMJ-PRG R. Barbulescu Sieves 0 / 28 Starting point Notations q prime g a generator of (F q ) X a (secret) integer
More informationMath 319 Problem Set #3 Solution 21 February 2002
Math 319 Problem Set #3 Solution 21 February 2002 1. ( 2.1, problem 15) Find integers a 1, a 2, a 3, a 4, a 5 such that every integer x satisfies at least one of the congruences x a 1 (mod 2), x a 2 (mod
More informationSUBGROUPS OF CYCLIC GROUPS. 1. Introduction In a group G, we denote the (cyclic) group of powers of some g G by
SUBGROUPS OF CYCLIC GROUPS KEITH CONRAD 1. Introduction In a group G, we denote the (cyclic) group of powers of some g G by g = {g k : k Z}. If G = g, then G itself is cyclic, with g as a generator. Examples
More informationThe Quadratic Sieve Factoring Algorithm
The Quadratic Sieve Factoring Algorithm Eric Landquist MATH 488: Cryptographic Algorithms December 14, 2001 1 Introduction Mathematicians have been attempting to find better and faster ways to factor composite
More informationCHAPTER 5. Number Theory. 1. Integers and Division. Discussion
CHAPTER 5 Number Theory 1. Integers and Division 1.1. Divisibility. Definition 1.1.1. Given two integers a and b we say a divides b if there is an integer c such that b = ac. If a divides b, we write a
More informationI. GROUPS: BASIC DEFINITIONS AND EXAMPLES
I GROUPS: BASIC DEFINITIONS AND EXAMPLES Definition 1: An operation on a set G is a function : G G G Definition 2: A group is a set G which is equipped with an operation and a special element e G, called
More informationSome practice problems for midterm 2
Some practice problems for midterm 2 Kiumars Kaveh November 15, 2011 Problem: What is the remainder of 6 2000 when divided by 11? Solution: This is a long-winded way of asking for the value of 6 2000 mod
More informationComputing Cubic Fields in Quasi-Linear Time
Computing Cubic Fields in Quasi-Linear Time K. Belabas Département de mathématiques (A2X) Université Bordeaux I 351, cours de la Libération, 33405 Talence (France) belabas@math.u-bordeaux.fr Cubic fields
More informationThe sum of digits of polynomial values in arithmetic progressions
The sum of digits of polynomial values in arithmetic progressions Thomas Stoll Institut de Mathématiques de Luminy, Université de la Méditerranée, 13288 Marseille Cedex 9, France E-mail: stoll@iml.univ-mrs.fr
More informationStudy of algorithms for factoring integers and computing discrete logarithms
Study of algorithms for factoring integers and computing discrete logarithms First Indo-French Workshop on Cryptography and Related Topics (IFW 2007) June 11 13, 2007 Paris, France Dr. Abhijit Das Department
More informationa 11 x 1 + a 12 x 2 + + a 1n x n = b 1 a 21 x 1 + a 22 x 2 + + a 2n x n = b 2.
Chapter 1 LINEAR EQUATIONS 1.1 Introduction to linear equations A linear equation in n unknowns x 1, x,, x n is an equation of the form a 1 x 1 + a x + + a n x n = b, where a 1, a,..., a n, b are given
More informationCopy in your notebook: Add an example of each term with the symbols used in algebra 2 if there are any.
Algebra 2 - Chapter Prerequisites Vocabulary Copy in your notebook: Add an example of each term with the symbols used in algebra 2 if there are any. P1 p. 1 1. counting(natural) numbers - {1,2,3,4,...}
More information= 2 + 1 2 2 = 3 4, Now assume that P (k) is true for some fixed k 2. This means that
Instructions. Answer each of the questions on your own paper, and be sure to show your work so that partial credit can be adequately assessed. Credit will not be given for answers (even correct ones) without
More informationElementary Number Theory and Methods of Proof. CSE 215, Foundations of Computer Science Stony Brook University http://www.cs.stonybrook.
Elementary Number Theory and Methods of Proof CSE 215, Foundations of Computer Science Stony Brook University http://www.cs.stonybrook.edu/~cse215 1 Number theory Properties: 2 Properties of integers (whole
More informationLectures on Number Theory. Lars-Åke Lindahl
Lectures on Number Theory Lars-Åke Lindahl 2002 Contents 1 Divisibility 1 2 Prime Numbers 7 3 The Linear Diophantine Equation ax+by=c 12 4 Congruences 15 5 Linear Congruences 19 6 The Chinese Remainder
More informationFactoring. Factoring 1
Factoring Factoring 1 Factoring Security of RSA algorithm depends on (presumed) difficulty of factoring o Given N = pq, find p or q and RSA is broken o Rabin cipher also based on factoring Factoring like
More informationSUM OF TWO SQUARES JAHNAVI BHASKAR
SUM OF TWO SQUARES JAHNAVI BHASKAR Abstract. I will investigate which numbers can be written as the sum of two squares and in how many ways, providing enough basic number theory so even the unacquainted
More informationMOP 2007 Black Group Integer Polynomials Yufei Zhao. Integer Polynomials. June 29, 2007 Yufei Zhao yufeiz@mit.edu
Integer Polynomials June 9, 007 Yufei Zhao yufeiz@mit.edu We will use Z[x] to denote the ring of polynomials with integer coefficients. We begin by summarizing some of the common approaches used in dealing
More informationInteger roots of quadratic and cubic polynomials with integer coefficients
Integer roots of quadratic and cubic polynomials with integer coefficients Konstantine Zelator Mathematics, Computer Science and Statistics 212 Ben Franklin Hall Bloomsburg University 400 East Second Street
More informationInteger Factorization
Integer Factorization Lecture given at the Joh. Gutenberg-Universität, Mainz, July 23, 1992 by ÖYSTEIN J. RÖDSETH University of Bergen, Department of Mathematics, Allégt. 55, N-5007 Bergen, Norway 1 Introduction
More informationA simple criterion on degree sequences of graphs
Discrete Applied Mathematics 156 (2008) 3513 3517 Contents lists available at ScienceDirect Discrete Applied Mathematics journal homepage: www.elsevier.com/locate/dam Note A simple criterion on degree
More informationPYTHAGOREAN TRIPLES KEITH CONRAD
PYTHAGOREAN TRIPLES KEITH CONRAD 1. Introduction A Pythagorean triple is a triple of positive integers (a, b, c) where a + b = c. Examples include (3, 4, 5), (5, 1, 13), and (8, 15, 17). Below is an ancient
More informationCryptography and Network Security Chapter 8
Cryptography and Network Security Chapter 8 Fifth Edition by William Stallings Lecture slides by Lawrie Brown (with edits by RHB) Chapter 8 Introduction to Number Theory The Devil said to Daniel Webster:
More informationThe Prime Numbers. Definition. A prime number is a positive integer with exactly two positive divisors.
The Prime Numbers Before starting our study of primes, we record the following important lemma. Recall that integers a, b are said to be relatively prime if gcd(a, b) = 1. Lemma (Euclid s Lemma). If gcd(a,
More informationHOMEWORK 5 SOLUTIONS. n!f n (1) lim. ln x n! + xn x. 1 = G n 1 (x). (2) k + 1 n. (n 1)!
Math 7 Fall 205 HOMEWORK 5 SOLUTIONS Problem. 2008 B2 Let F 0 x = ln x. For n 0 and x > 0, let F n+ x = 0 F ntdt. Evaluate n!f n lim n ln n. By directly computing F n x for small n s, we obtain the following
More informationPrimality Testing and Factorization Methods
Primality Testing and Factorization Methods Eli Howey May 27, 2014 Abstract Since the days of Euclid and Eratosthenes, mathematicians have taken a keen interest in finding the nontrivial factors of integers,
More informationSECTION 0.6: POLYNOMIAL, RATIONAL, AND ALGEBRAIC EXPRESSIONS
(Section 0.6: Polynomial, Rational, and Algebraic Expressions) 0.6.1 SECTION 0.6: POLYNOMIAL, RATIONAL, AND ALGEBRAIC EXPRESSIONS LEARNING OBJECTIVES Be able to identify polynomial, rational, and algebraic
More informationGambling Systems and Multiplication-Invariant Measures
Gambling Systems and Multiplication-Invariant Measures by Jeffrey S. Rosenthal* and Peter O. Schwartz** (May 28, 997.. Introduction. This short paper describes a surprising connection between two previously
More informationLUC: A New Public Key System
LUC: A New Public Key System Peter J. Smith a and Michael J. J. Lennon b a LUC Partners, Auckland UniServices Ltd, The University of Auckland, Private Bag 92019, Auckland, New Zealand. b Department of
More informationFactoring & Primality
Factoring & Primality Lecturer: Dimitris Papadopoulos In this lecture we will discuss the problem of integer factorization and primality testing, two problems that have been the focus of a great amount
More informationUndergraduate Notes in Mathematics. Arkansas Tech University Department of Mathematics
Undergraduate Notes in Mathematics Arkansas Tech University Department of Mathematics An Introductory Single Variable Real Analysis: A Learning Approach through Problem Solving Marcel B. Finan c All Rights
More informationAlgebra 1 Course Title
Algebra 1 Course Title Course- wide 1. What patterns and methods are being used? Course- wide 1. Students will be adept at solving and graphing linear and quadratic equations 2. Students will be adept
More informationOn prime-order elliptic curves with embedding degrees k = 3, 4 and 6
On prime-order elliptic curves with embedding degrees k = 3, 4 and 6 Koray Karabina and Edlyn Teske University of Waterloo ANTS VIII, Banff, May 20, 2008 K. Karabina and E. Teske (UW) Prime-order elliptic
More information6 EXTENDING ALGEBRA. 6.0 Introduction. 6.1 The cubic equation. Objectives
6 EXTENDING ALGEBRA Chapter 6 Extending Algebra Objectives After studying this chapter you should understand techniques whereby equations of cubic degree and higher can be solved; be able to factorise
More informationPowers of Two in Generalized Fibonacci Sequences
Revista Colombiana de Matemáticas Volumen 462012)1, páginas 67-79 Powers of Two in Generalized Fibonacci Sequences Potencias de dos en sucesiones generalizadas de Fibonacci Jhon J. Bravo 1,a,B, Florian
More information5.1 Radical Notation and Rational Exponents
Section 5.1 Radical Notation and Rational Exponents 1 5.1 Radical Notation and Rational Exponents We now review how exponents can be used to describe not only powers (such as 5 2 and 2 3 ), but also roots
More informationFACTORING LARGE NUMBERS, A GREAT WAY TO SPEND A BIRTHDAY
FACTORING LARGE NUMBERS, A GREAT WAY TO SPEND A BIRTHDAY LINDSEY R. BOSKO I would like to acknowledge the assistance of Dr. Michael Singer. His guidance and feedback were instrumental in completing this
More informationMATH 289 PROBLEM SET 4: NUMBER THEORY
MATH 289 PROBLEM SET 4: NUMBER THEORY 1. The greatest common divisor If d and n are integers, then we say that d divides n if and only if there exists an integer q such that n = qd. Notice that if d divides
More informationThe Goldberg Rao Algorithm for the Maximum Flow Problem
The Goldberg Rao Algorithm for the Maximum Flow Problem COS 528 class notes October 18, 2006 Scribe: Dávid Papp Main idea: use of the blocking flow paradigm to achieve essentially O(min{m 2/3, n 1/2 }
More informationFaster deterministic integer factorisation
David Harvey (joint work with Edgar Costa, NYU) University of New South Wales 25th October 2011 The obvious mathematical breakthrough would be the development of an easy way to factor large prime numbers
More informationSECTION 10-2 Mathematical Induction
73 0 Sequences and Series 6. Approximate e 0. using the first five terms of the series. Compare this approximation with your calculator evaluation of e 0.. 6. Approximate e 0.5 using the first five terms
More information5. Factoring by the QF method
5. Factoring by the QF method 5.0 Preliminaries 5.1 The QF view of factorability 5.2 Illustration of the QF view of factorability 5.3 The QF approach to factorization 5.4 Alternative factorization by the
More informationSTUDENT S SOLUTIONS MANUAL ELEMENTARY NUMBER THEORY. Bart Goddard. Kenneth H. Rosen AND ITS APPLICATIONS FIFTH EDITION. to accompany.
STUDENT S SOLUTIONS MANUAL to accompany ELEMENTARY NUMBER THEORY AND ITS APPLICATIONS FIFTH EDITION Bart Goddard Kenneth H. Rosen AT&T Labs Reproduced by Pearson Addison-Wesley from electronic files supplied
More informationOn continued fractions of the square root of prime numbers
On continued fractions of the square root of prime numbers Alexandra Ioana Gliga March 17, 2006 Nota Bene: Conjecture 5.2 of the numerical results at the end of this paper was not correctly derived from
More informationAdvanced Cryptography
Family Name:... First Name:... Section:... Advanced Cryptography Final Exam July 18 th, 2006 Start at 9:15, End at 12:00 This document consists of 12 pages. Instructions Electronic devices are not allowed.
More informationThe cyclotomic polynomials
The cyclotomic polynomials Notes by G.J.O. Jameson 1. The definition and general results We use the notation e(t) = e 2πit. Note that e(n) = 1 for integers n, e(s + t) = e(s)e(t) for all s, t. e( 1 ) =
More informationLAKE ELSINORE UNIFIED SCHOOL DISTRICT
LAKE ELSINORE UNIFIED SCHOOL DISTRICT Title: PLATO Algebra 1-Semester 2 Grade Level: 10-12 Department: Mathematics Credit: 5 Prerequisite: Letter grade of F and/or N/C in Algebra 1, Semester 2 Course Description:
More informationAn Introductory Course in Elementary Number Theory. Wissam Raji
An Introductory Course in Elementary Number Theory Wissam Raji 2 Preface These notes serve as course notes for an undergraduate course in number theory. Most if not all universities worldwide offer introductory
More informationStationary random graphs on Z with prescribed iid degrees and finite mean connections
Stationary random graphs on Z with prescribed iid degrees and finite mean connections Maria Deijfen Johan Jonasson February 2006 Abstract Let F be a probability distribution with support on the non-negative
More informationCollinear Points in Permutations
Collinear Points in Permutations Joshua N. Cooper Courant Institute of Mathematics New York University, New York, NY József Solymosi Department of Mathematics University of British Columbia, Vancouver,
More informationShort Programs for functions on Curves
Short Programs for functions on Curves Victor S. Miller Exploratory Computer Science IBM, Thomas J. Watson Research Center Yorktown Heights, NY 10598 May 6, 1986 Abstract The problem of deducing a function
More information